{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,11]],"date-time":"2026-03-11T01:31:04Z","timestamp":1773192664319,"version":"3.50.1"},"reference-count":53,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2007,9,25]],"date-time":"2007-09-25T00:00:00Z","timestamp":1190678400000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Requirements Eng"],"published-print":{"date-parts":[[2008,1]]},"DOI":"10.1007\/s00766-007-0058-9","type":"journal-article","created":{"date-parts":[[2007,9,24]],"date-time":"2007-09-24T05:59:21Z","timestamp":1190613561000},"page":"73-86","source":"Crossref","is-referenced-by-count":43,"title":["MOQARE: misuse-oriented quality requirements engineering"],"prefix":"10.1007","volume":"13","author":[{"given":"Andrea","family":"Herrmann","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Barbara","family":"Paech","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2007,9,25]]},"reference":[{"key":"58_CR1","unstructured":"Paech B, Kerkow D (2004) Non-functional requirements engineering: quality is essential. In: Regnell B, Kamsties E, Gervasi V (eds) Proceedings of the 10th international workshop on requirements engineering: foundation of software quality\u2014REFSQ 04, Essener Informatik Beitr\u00e4ge Bd 9, Essen, pp 237\u2013250"},{"key":"58_CR2","unstructured":"Sindre G, Opdahl AL (2001) Templates for misuse case description. In: Proceedings of the 7th international workshop on requirements engineering: foundation of software quality\u2014REFSQ 01, Essener Informatik Beitr\u00e4ge Bd.6, Essen, pp 125\u2013136"},{"key":"58_CR3","unstructured":"Sindre G, Firesmith DG, Opdahl AL (2003) A reuse based approach to determining security requirements. In: Proceedings of the 9th international workshop on requirements engineering: foundation of software quality\u2014REFSQ 03, Essener Informatik Beitr\u00e4ge Bd.8, Essen, pp 37\u201346"},{"key":"58_CR4","unstructured":"Herrmann A, Paech B (2005) Quality misuse. In: Kamsties E, Gervasi V, Sawyer P (eds) Proceedings of the 11th international workshop on requirements engineering: foundation of software quality\u2014REFSQ 05, Essener Informatik Beitr\u00e4ge Bd. 10, Essen, pp 193\u2013199"},{"key":"58_CR5","doi-asserted-by":"crossref","unstructured":"Kazman R, Klein M, Clements P (2000) ATAM: method for architecture evaluation. CMU\/SEI-2000-TR-004, Software Engineering Institution, Carnegie Mellon University","DOI":"10.21236\/ADA382629"},{"key":"58_CR6","unstructured":"Wiegers KE (2002) Success criteria breed success, The Rational Edge, 2(2)"},{"key":"58_CR7","doi-asserted-by":"crossref","unstructured":"Firesmith DG (2003) Analyzing and specifying reusable security requirements. Requirements for high assurance systems (RHAS) Workshop","DOI":"10.21236\/ADA612733"},{"key":"58_CR8","unstructured":"International Standard ISO\/IEC 9126. Information technology-Software product evaluation-quality characteristics and guidelines for their use"},{"key":"58_CR9","doi-asserted-by":"crossref","unstructured":"Chung L, Nixon BA, Yu E, Mylopoulos J (2000) Non-functional requirements in software engineering. Kluwer, Dordrecht","DOI":"10.1007\/978-1-4615-5269-7"},{"key":"58_CR10","unstructured":"D\u00f6rr J, Punter T, Bayer J, Kerkow D, Kolb R, Koenig T, Olsson T, Trendowicz A (2004) Quality models for non-functional requirements. IESE-Report Nr. 010.04\/E"},{"key":"58_CR11","first-page":"120","volume":"2000","author":"G Sindre","year":"2000","unstructured":"Sindre G, Opdahl AL (2000) Eliciting security requirements by misuse cases. Tools Pacific 2000:120\u2013131","journal-title":"Tools Pacific"},{"key":"58_CR12","unstructured":"Sutcliffe A, Minocha S (1998) Scenario-based analysis of non-functional requirements. In: Dubois E, Opdahl AL, Pohl K (eds) Proceedings of the fourth international workshop on requirements engineering: foundation of software quality\u2014REFSQ 98, Presses universitaires de Namur, Namur, pp 219\u2013234"},{"issue":"3","key":"58_CR13","doi-asserted-by":"crossref","first-page":"53","DOI":"10.5381\/jot.2003.2.3.c6","volume":"2","author":"DG Firesmith","year":"2003","unstructured":"Firesmith DG (2003) Security use cases. J Object Technol 2(3):53\u201364","journal-title":"J Object Technol"},{"issue":"1","key":"58_CR14","doi-asserted-by":"crossref","first-page":"61","DOI":"10.5381\/jot.2004.3.1.c6","volume":"3","author":"DG Firesmith","year":"2004","unstructured":"Firesmith DG (2004) Specifying reusable security requirements. J Object Technol 3(1):61\u201375","journal-title":"J Object Technol"},{"key":"58_CR15","unstructured":"Herrmann A, Paech B (2005) Software quality by misuse analysis. Technical report SWEHD-TR-2005-01 (University of Heidelberg). http:\/\/www-swe.informatik.uni-heidelberg.de\/research\/publications\/reports.htm"},{"key":"58_CR16","unstructured":"BSI (Bundesamt f\u00fcr Sicherheit in der Informationstechnik = German Ministery for Security in Information Technology) (2004) IT-Grundschutzhandbuch. http:\/\/www.bsi.bund.de\/gshb\/deutsch\/g\/g01.html"},{"issue":"8","key":"58_CR17","doi-asserted-by":"crossref","first-page":"830","DOI":"10.1109\/32.83917","volume":"17","author":"T Nakajo","year":"1991","unstructured":"Nakajo T, Kume H (1991) A case history analysis of software error cause-effect relationships. IEEE Trans Softw Eng 17(8):830\u2013838","journal-title":"IEEE Trans Softw Eng"},{"key":"58_CR18","unstructured":"Lutz RR (1993) Analysing software requirements errors in safety-critical embedded systems. Requirements engineering conference. IEEE Computer Society Press, Silver Spring, pp 126\u2013133"},{"key":"58_CR19","unstructured":"van Lamsweerde A, Brohez S, De Landtsheer R, Janssens D (2003) From system goals to intruder anti-goals: attack generation and resolution for security requirements engineering. RHAS\u201903 Workshop, pp 49\u201356"},{"key":"58_CR20","unstructured":"D\u00f6rr J, Kerkow D, von Knethen A, Paech B (2003) Eliciting efficiency requirements with use cases. In: Proceedings of the 9th international workshop on requirements engineering: foundation of software quality\u2014REFSQ 03, Essener Informatik Beitr\u00e4ge Bd.8, Essen, pp 37\u201346"},{"key":"58_CR21","doi-asserted-by":"crossref","unstructured":"Herrmann A, R\u00fcckert J, Paech B (2006) Exploring the interoperability of web services using MOQARE. IS-TSPQ workshop, first international workshop on interoperability solutions to trust, security, policies and QoS for enhanced enterprise systems, 21 March 2006, Bordeaux","DOI":"10.1002\/9780470612200.ch17"},{"key":"58_CR22","unstructured":"Herrmann A (2007) Priorisierung von Qualit\u00e4tsanforderungen auf der Basis von Risikoabsch\u00e4tzungen. Software & Systems Quality Conferences International 2007, 27 April 2007, D\u00fcsseldorf"},{"key":"58_CR23","doi-asserted-by":"crossref","unstructured":"Herrmann A, Kerkow D, Doerr J (2007) Exploring the characteristics of NFR methods\u2014a dialogue about two approaches. In: Sawyer P, Paech B, Heymans P (eds) Proceedings of the 13th international workshop on requirements engineering: foundation of software quality\u2014REFSQ 07, Springer, pp 320\u2013334","DOI":"10.1007\/978-3-540-73031-6_24"},{"issue":"3","key":"58_CR24","doi-asserted-by":"crossref","first-page":"188","DOI":"10.1007\/s11576-007-0049-y","volume":"49","author":"D Wei\u00df","year":"2007","unstructured":"Wei\u00df D, Kaack J, Kirn S, Gilliot M, Lowis L, M\u00fcller G, Herrmann A, Binnig C, Illes T, Paech B, Kossmann D (2007) Die SIKOSA-Methodik - Unterst\u00fctzung der industriellen Softwareproduktion durch methodisch integrierte Softwareentwicklungsprozesse. Wirtschaftsinformatik 49(3):188\u2013198","journal-title":"Wirtschaftsinformatik"},{"key":"58_CR25","unstructured":"Alexander I (2002) Initial industrial experience of misuse cases. Requirements engineering conference, pp 61\u201368"},{"issue":"1","key":"58_CR26","doi-asserted-by":"crossref","first-page":"58","DOI":"10.1109\/MS.2003.1159030","volume":"20","author":"I Alexander","year":"2003","unstructured":"Alexander I (2003) Misuse Cases: Use Cases with hostile intent. IEEE Softw 20(1):58\u201366","journal-title":"IEEE Softw"},{"key":"58_CR27","doi-asserted-by":"crossref","unstructured":"Firesmith DG (2003) Common concepts underlying safety, security, and survivability engineering. Technical note CMU\/SEI-2003-TN-033","DOI":"10.21236\/ADA421683"},{"key":"58_CR28","doi-asserted-by":"crossref","unstructured":"McDermott J, Fox C (1999) Using abuse case models for security requirements analysis. 15th annual computer security applications conference ACSAC, pp 55\u201365","DOI":"10.1109\/CSAC.1999.816013"},{"key":"58_CR29","unstructured":"Allenby K, Kelly T (2001) Deriving safety requirements using scenarios. requirements engineering conference, pp 228\u2013235"},{"key":"58_CR30","unstructured":"Aagedal J\u00d6, den Braber F, Dimitrakos T, Gran BA, Raptis D, St\u00f6len K (2002) Model-based risk assessment to improve enterprise security. 5th international EDOC conference, pp 51\u201362"},{"key":"58_CR31","unstructured":"Moffett JD, Haley CB, Nuseibeh B (2004) Core security requirements artefacts. technical report No 2004\/23, Department of Computing, The Open University, UK"},{"key":"58_CR32","unstructured":"Computer security resource center (CSRC). Common Criteria, Version 2.1. http:\/\/csrc.nist.gov\/cc\/"},{"key":"58_CR33","doi-asserted-by":"crossref","unstructured":"Moore AP, Ellison RJ, Linger RC (2001) Attack modeling for information security and survivability. Technical Note CMU\/SEI-2001-TN-001","DOI":"10.21236\/ADA387544"},{"key":"58_CR34","unstructured":"Lin L, Nuseibeh BA, Ince DC, Jackson M, Moffett JD (2003) Analysing security threats and vulnerabilities using abuse frames. Technical report No: 2003\/10, Department of Computing, The Open University, United Kingdom"},{"key":"58_CR35","doi-asserted-by":"crossref","unstructured":"Liu L, Yu E, Mylopoulos J (2003) Security and privacy requirements analysis with a social setting. Requirements engineering conference, pp 151\u2013161","DOI":"10.1109\/ICRE.2003.1232746"},{"key":"58_CR36","unstructured":"Object Management Group (2004) UML profile for modeling quality of service and fault tolerance characteristics and mechanisms. http:\/\/www.omg.org\/docs\/ptc\/04-09-01.pdf"},{"key":"58_CR37","unstructured":"Blakley B, Heath C, and members of The Open Group Security Forum. Security Design Patterns. http:\/\/www.opengroup.org\/onlinepubs\/9299969899\/toc.pdf"},{"key":"58_CR38","doi-asserted-by":"crossref","unstructured":"Kazman R, Klein M, Barbacci M, Longstaff T, Lipson H, Carriere SJ (1998) The architecture tradeoff analysis method. Software Engineering Institute, Technical report CMU\/SEI-98-TR-008","DOI":"10.21236\/ADA350761"},{"key":"58_CR39","unstructured":"Cysneiros LM, Yu E, Leite JCSP (2003) Cataloguing non-functional requirements as softgoal networks. In: Proceedings of requirements engineering for adaptable architectures, at RE\u201903, pp 13\u201320"},{"issue":"1","key":"58_CR40","doi-asserted-by":"crossref","first-page":"92","DOI":"10.1109\/52.903174","volume":"18","author":"J Mylopoulos","year":"2001","unstructured":"Mylopoulos J, Chung L, Liao SSY, Wang H, Yu E (2001) Exploring alternatives during requirements analysis. IEEE Softw 18(1):92\u201396","journal-title":"IEEE Softw"},{"key":"58_CR41","unstructured":"Liu L, Yu E (2001) From requirements to architectural design\u2014using goals and scenarios. Workshop STRAW, ICSE 2001, http:\/\/www.cin.ufpe.br\/\u223cstraw01\/"},{"key":"58_CR42","unstructured":"Cysneiros LM, Leite JCSP (2001) Driving Non-functional requirements to use cases and scenarios. In: Proceedings of XV Brazilian symposium on software engineering, pp 7\u201320"},{"key":"58_CR43","volume-title":"Failure mode and effect analysis\u2014FMEA from theory to execution","author":"DH Stamatis","year":"2003","unstructured":"Stamatis DH (2003) Failure mode and effect analysis\u2014FMEA from theory to execution. American Society for Quality Press, Milwaukee"},{"key":"58_CR44","unstructured":"BSI (Bundesamt f\u00fcr Sicherheit in der Informationstechnik = German Ministery for Security in Information Technology) (1989) IT security criteria. http:\/\/www.bsi.bund.de\/zertifiz\/itkrit\/itgruene.pdf"},{"key":"58_CR45","unstructured":"BSI (Bundesamt f\u00fcr Sicherheit in der Informationstechnik = German Ministery for Security in Information Technology) (1991) Information Technology Security Evaluation Criteria. http:\/\/www.bsi.bund.de\/zertifiz\/itkrit\/itsec-en.pdf"},{"issue":"3","key":"58_CR46","doi-asserted-by":"crossref","first-page":"211","DOI":"10.1145\/185403.185412","volume":"26","author":"CE Landwehr","year":"1994","unstructured":"Landwehr CE, Bull AR, McDermott JP, Choi WS (1994) A taxonomy of computer program security flaws, with examples. ACM Comput Surv 26(3):211\u2013254","journal-title":"ACM Comput Surv"},{"key":"58_CR47","unstructured":"Aslam T (1995) A taxonomy of security faults in the Unix operating system. Master\u2019s thesis, Purdue University"},{"key":"58_CR48","doi-asserted-by":"crossref","unstructured":"Anton AI, Earp JB, Reese A (2002) Analyzing website privacy requirements using a privacy goal taxonomy. Requirements engineering conference, pp 23\u201331","DOI":"10.1109\/ICRE.2002.1048502"},{"key":"58_CR49","unstructured":"Richardson R (2003) 2003 CSI\/FBI Computer crime and security survey. Computer Security Institute, http:\/\/i.cmpnet.com\/gocsi\/db_area\/pdfs\/fbi\/FBI2003.pdf"},{"key":"58_CR50","doi-asserted-by":"crossref","unstructured":"Killourhy KS, Maxion RA, Tan KMC (2004) A Defense-centric taxonomy based on attack manifestations. International conference on dependable systems and networks, pp 102\u2013111","DOI":"10.1109\/DSN.2004.1311881"},{"key":"58_CR51","volume-title":"Total quality control\u2014engineering and management","author":"AV Feigenbaum","year":"1961","unstructured":"Feigenbaum AV (1961) Total quality control\u2014engineering and management. McGraw-Hill, New York"},{"issue":"6","key":"58_CR52","first-page":"1","volume":"16","author":"A Herrmann","year":"2006","unstructured":"Herrmann A, Paech B, Plaza D (2006) ICRAD: an integrated process for requirements conflict solution and architectural design. IJSEKE 16(6):1\u201334","journal-title":"IJSEKE"},{"key":"58_CR53","unstructured":"Paech B, Dutoit A, Kerkow D, von Knethen A (2002) Functional requirements, non-functional requirements and architecture specification cannot be separated\u2014a position paper. In: Proceedings of the 8th internationalworkshop on requirements engineering: Foundation of software quality\u2014REFSQ 02, Essener Informatik Beitr\u00e4ge Bd.8, Essen, pp. 102\u2013107"}],"container-title":["Requirements Engineering"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s00766-007-0058-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s00766-007-0058-9\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s00766-007-0058-9","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,2,18]],"date-time":"2024-02-18T02:58:30Z","timestamp":1708225110000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s00766-007-0058-9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2007,9,25]]},"references-count":53,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2008,1]]}},"alternative-id":["58"],"URL":"https:\/\/doi.org\/10.1007\/s00766-007-0058-9","relation":{},"ISSN":["0947-3602","1432-010X"],"issn-type":[{"value":"0947-3602","type":"print"},{"value":"1432-010X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2007,9,25]]}}}